This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/16oaMN5X6HEfvxV2hqwlnzKAq2U.roa File: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (raw, json) Hash identifier: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo= Subject key identifier: D7:AA:1A:30:DE:57:E8:71:1F:BF:15:76:86:AC:25:9F:32:80:AB:65 Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Certificate serial: 019B7D5BCA7D3A83BC4DD39354020BF5AE3E Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/16oaMN5X6HEfvxV2hqwlnzKAq2U.roa Signing time: Fri 02 Jan 2026 06:18:46 +0000 ROA not before: Fri 02 Jan 2026 06:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 159.149.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ca:7d:3a:83:bc:4d:d3:93:54:02:0b:f5:ae:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Validity Not Before: Jan 2 06:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7aa1a30de57e8711fbf157686ac259f3280ab65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:89:5d:24:70:65:ee:4e:8c:3c:c4:e1:31: e4:83:c3:20:f8:ca:b4:1f:fb:68:69:be:9b:d9:a8: 31:e4:27:d6:e1:9c:ec:12:2b:23:89:2b:63:44:f0: 94:f1:ac:95:70:05:b9:7b:f1:3c:54:2d:5b:41:b7: 35:df:b2:57:8a:25:4f:63:e7:3b:9a:30:50:13:a3: 52:64:2a:6a:28:4c:6b:5a:f9:48:3b:f5:2a:b3:7f: ea:ce:ca:54:83:6f:64:78:7d:fe:38:7e:f8:9b:52: fb:d0:69:05:32:75:68:44:75:9f:11:bb:ef:e2:28: db:64:5a:a8:57:7a:23:69:77:08:3e:5a:3f:e7:25: 58:b1:48:0a:19:7e:77:41:b2:8c:8f:93:62:8f:3b: aa:e8:aa:37:13:49:62:76:f4:9c:4b:3b:62:e5:59: be:a1:d2:64:40:65:44:99:b0:fe:b5:f2:ab:7b:2e: 0f:54:88:f7:d2:79:9e:a4:7a:6c:c3:db:d1:4a:5e: 72:a7:28:7f:43:ed:78:15:83:0c:f5:b2:44:eb:b5: 48:72:1c:7b:34:d5:20:a3:16:8a:1d:8f:d8:42:c1: 64:e9:84:17:e2:a5:e1:d8:ee:72:d7:d8:14:55:39: 8c:20:31:03:f3:29:68:25:0f:a4:06:4e:55:f7:ed: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AA:1A:30:DE:57:E8:71:1F:BF:15:76:86:AC:25:9F:32:80:AB:65 X509v3 Authority Key Identifier: keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/16oaMN5X6HEfvxV2hqwlnzKAq2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.149.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:d7:c0:33:e5:ee:ec:b0:ec:8c:c8:85:4f:55:bf:af:ca:02: bf:82:23:7e:31:84:7e:8e:80:50:5a:a2:6c:2c:37:ac:8e:a7: b2:6b:dd:86:3e:04:2b:c0:05:67:7b:69:f0:f8:d1:0e:da:bd: 32:d2:35:1d:1e:72:6c:2c:01:10:3e:01:2c:82:c3:10:50:e2: 56:80:e1:59:09:83:f6:3f:61:27:2e:e8:fd:e0:38:1a:f2:1a: 75:21:b8:90:47:11:6f:73:c8:e1:06:0e:25:1b:3e:a4:2f:dd: 43:72:28:1d:96:77:9b:59:32:04:7f:9a:47:d3:69:91:34:b7: 8f:61:42:e2:c1:a1:c6:bd:40:c9:2f:64:f9:f4:79:28:c2:eb: 69:17:25:8e:ac:32:16:98:2b:3b:9f:6f:2d:b8:c0:7e:6c:79: af:cf:72:e7:7c:91:21:40:1e:da:72:da:72:7d:a1:1c:c4:09: 13:6a:40:ad:38:ad:37:4a:05:ce:b5:34:d8:c1:c1:76:2e:fc: 01:92:a4:62:2e:3a:95:b5:5e:c2:d0:c0:c1:d4:e3:8a:89:fa: dd:bf:2c:6e:eb:68:e1:5e:ad:2f:fc:eb:68:9e:19:11:ee:8f: 80:f0:39:a9:c2:d8:49:89:6c:c4:38:76:43:8e:f9:d8:47:45: 90:23:23:82 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9W8p9OoO8TdOTVAIL9a4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OWI2YTEwOTdiMWYyNTFmOTVjNTZkYTRlNGFhMzExYjk0 NzBiZmYwHhcNMjYwMTAyMDYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2FhMWEzMGRlNTdlODcxMWZiZjE1NzY4NmFjMjU5ZjMyODBhYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9KJXSRwZe5OjDzE4THkg8Mg+Mq0 H/toab6b2agx5CfW4ZzsEisjiStjRPCU8ayVcAW5e/E8VC1bQbc137JXiiVPY+c7 mjBQE6NSZCpqKExrWvlIO/Uqs3/qzspUg29keH3+OH74m1L70GkFMnVoRHWfEbvv 4ijbZFqoV3ojaXcIPlo/5yVYsUgKGX53QbKMj5Nijzuq6Ko3E0lidvScSzti5Vm+ odJkQGVEmbD+tfKrey4PVIj30nmepHpsw9vRSl5ypyh/Q+14FYMM9bJE67VIchx7 NNUgoxaKHY/YQsFk6YQX4qXh2O5y19gUVTmMIDED8yloJQ+kBk5V9+1qMQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNeqGjDeV+hxH78VdoasJZ8ygKtlMB8GA1UdIwQY MBaAFNibahCXsfJR+VxW2k5KoxG5Rwv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODIt ZDZkMzQyMmJhZWM4LzEvMTZvYU1ONVg2SEVmdnhWMmhxd2xuektBcTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODItZDZkMzQyMmJhZWM4 LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn5UwDQYJ KoZIhvcNAQELBQADggEBAAvXwDPl7uyw7IzIhU9Vv6/KAr+CI34xhH6OgFBaomws N6yOp7Jr3YY+BCvABWd7afD40Q7avTLSNR0ecmwsARA+ASyCwxBQ4laA4VkJg/Y/ YScu6P3gOBryGnUhuJBHEW9zyOEGDiUbPqQv3UNyKB2Wd5tZMgR/mkfTaZE0t49h QuLBoca9QMkvZPn0eSjC62kXJY6sMhaYKzufby24wH5sea/Pcud8kSFAHtpy2nJ9 oRzECRNqQK04rTdKBc61NNjBwXYu/AGSpGIuOpW1XsLQwMHU44qJ+t2/LG7raOFe rS/862ieGRHuj4DwOanC2EmJbMQ4dkOO+dhHRZAjI4I= -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:51 2026 by rpki-client